loggrove vulnerabilities and fixes

Recent CVEs affecting loggrove, with upgrade or downgrade steps. 3 tracked.

loggrove has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-28. Highest priority: CVE-2025-26014 (score 61/100).

• CVE-2025-26047 MEDIUM 5.1 DOWNGRADE Loggrove v1.0 is vulnerable to SQL Injection in the read.py file.
• CVE-2025-26014 CRITICAL 9.8 DOWNGRADE A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary co
• CVE-2025-26013 HIGH 8.2 DOWNGRADE An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.

FAQ

How do I fix loggrove vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is loggrove being exploited right now?

None of the tracked loggrove CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which loggrove CVE should I patch first?

CVE-2025-26014 currently ranks highest (61/100): A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary co.

RSS feed for loggrove · ← Back to latest CVEs